
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          aIpEgqJqXHMnuJ8DmhK6XK0SoqLJJzxwAXcdQRT78Ic=
Subject key identifier:   CF:8A:10:0D:06:EC:25:91:0F:43:C1:D0:97:DF:3C:18:7B:00:AF:03
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019A4EF54C535122CEE5255CD52175FDE59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          171E
Signing time:             Tue 04 Nov 2025 13:01:29 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:29 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:29 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=)
                          3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=)
                          5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: 5k0VSgbpw2bkapaUsj44gcLe0/E4nis7fSVDQvAwNB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:4c:53:51:22:ce:e5:25:5c:d5:21:75:fd:e5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Nov  4 13:01:29 2025 GMT
            Not After : Nov  5 13:01:29 2025 GMT
        Subject: CN=cf8a100d06ec25910f43c1d097df3c187b00af03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:62:60:27:0f:e4:d9:0f:12:dd:89:5f:5f:
                    a9:c3:67:68:5b:87:d5:41:e5:64:6e:10:62:4f:69:
                    fb:bc:dc:e1:7e:3e:c7:8d:86:59:35:5f:79:96:70:
                    b1:7c:d8:da:59:29:94:b7:f3:75:e3:6a:6e:31:cb:
                    5b:24:19:8c:83:a5:d1:b4:5e:ee:5f:af:c2:d9:0a:
                    34:ec:44:82:2b:62:f5:7b:af:aa:0f:b7:f0:f7:f1:
                    05:62:f6:00:22:d2:71:ed:5b:72:ba:82:e1:3d:c0:
                    f5:b7:70:c9:33:66:b5:b4:df:a0:6a:a6:ad:d5:ab:
                    d8:97:26:83:90:9d:a4:d4:8d:6c:09:1e:f6:75:a0:
                    81:ee:7d:a3:79:fa:59:ae:fa:36:75:f7:da:47:1a:
                    ae:a0:42:00:d6:ee:92:5b:07:cb:c2:35:8d:f8:40:
                    14:a8:8b:a4:7d:0b:ce:e7:6b:97:9e:10:4f:3d:37:
                    9e:9c:c2:59:08:68:36:71:52:6c:13:ed:18:b7:d5:
                    ab:08:37:52:bf:41:8c:7e:c8:b6:fa:78:69:97:68:
                    af:c2:30:0e:60:66:75:e4:d9:76:85:1c:c6:eb:98:
                    26:61:ce:b0:57:c3:36:0f:29:17:e0:e4:20:bf:42:
                    64:e4:02:0a:60:7e:cb:75:e6:03:90:ed:77:50:2d:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8A:10:0D:06:EC:25:91:0F:43:C1:D0:97:DF:3C:18:7B:00:AF:03
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         5a:8d:1c:d4:0c:8f:7d:4d:a3:fd:01:fa:17:19:1c:6b:17:9a:
         79:19:da:4a:be:25:9b:02:73:a8:41:ac:7b:ad:29:20:ad:ee:
         a3:f1:3b:e3:18:44:a6:f4:1d:f1:b2:a0:f0:95:1d:5d:a7:ae:
         c3:c3:14:25:91:d7:e7:2f:d7:40:bb:dc:bb:eb:35:e4:32:9b:
         bb:0c:2c:af:37:48:8f:5b:b7:73:1b:3e:6f:e0:20:18:12:78:
         7c:67:20:f5:75:22:86:a2:4d:8c:cf:2a:31:28:34:17:09:82:
         b6:5d:2c:75:00:51:94:57:63:93:bd:7b:eb:b3:79:20:4c:d9:
         54:4e:40:d6:d6:b9:7e:7f:c8:80:32:7b:f5:c2:36:b1:a2:bb:
         14:ee:cb:b3:3b:ed:8d:fa:46:d7:51:f5:6c:62:df:10:20:53:
         cc:47:28:44:75:11:bc:63:34:41:83:f7:89:20:06:1b:fa:00:
         86:68:99:fd:e8:42:92:58:f1:39:4b:6d:b2:09:78:00:b1:f9:
         85:2f:e5:e4:5f:dd:cc:e9:44:6b:e5:01:6f:f6:41:2c:12:31:
         5e:84:db:73:39:69:6c:b2:c7:e4:73:cb:47:7a:63:49:f2:fd:
         17:7f:07:db:bc:5d:9c:55:b8:6b:b8:87:44:27:2c:53:17:3c:
         dc:63:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:24:31 2025 by rpki-client